Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/7cdca630-d3e7-3865-840b-973e14ba9d60.roa
File:                     7cdca630-d3e7-3865-840b-973e14ba9d60.roa (raw, json)
Hash identifier:          pDUmEbY7w/Myf7MQ/j4ZlQTsa7O4MUC5W2d0uWVsX9c=
Subject key identifier:   D7:1D:C3:98:CD:8C:23:60:A9:A1:E2:F4:D3:BD:27:95:6F:03:FC:23
Certificate issuer:       /CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
Certificate serial:       010D0C9F4328584B5571E55A937FF27E5D57FC00
Authority key identifier: 4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/7cdca630-d3e7-3865-840b-973e14ba9d60.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     23404
IP address blocks:        2602:fbbb::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:e5:5a:93:7f:f2:7e:5d:57:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58d7f53-424c-46bf-bd09-c1a26b82131e
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=6671e69d-13fa-42c7-acf0-16465e52ee63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:b3:81:ff:73:62:05:e0:73:3a:bd:12:7f:
                    ac:c9:69:2f:f2:e5:04:75:bd:bc:2d:21:58:5f:61:
                    51:bb:a8:27:2e:08:ca:8b:f5:10:da:ec:93:eb:54:
                    c8:99:c9:83:ac:c9:36:2d:b2:ce:86:27:44:b9:0a:
                    a3:47:07:c6:02:97:93:78:80:44:e1:4a:7b:c2:e6:
                    3c:3b:22:3b:86:f1:70:2a:cf:c5:fe:7f:4e:31:33:
                    2d:f8:25:a5:ec:eb:7a:f6:ee:54:98:dc:03:13:26:
                    f7:8f:ef:24:2d:59:8c:39:7a:42:1c:9c:27:e3:18:
                    9f:d0:70:95:c7:af:a8:ed:67:ef:86:14:9e:23:98:
                    5a:c3:60:fb:2f:76:05:02:c6:40:44:9d:cc:23:6e:
                    ee:d6:4a:68:bf:66:16:ae:31:7e:e8:18:bf:aa:3f:
                    8d:67:d0:24:45:ff:01:e3:19:d1:00:8b:da:2c:2d:
                    fe:5d:6a:a3:52:a5:97:18:15:5c:0a:3b:20:19:12:
                    1c:68:8c:2f:a9:13:93:7a:29:3c:37:23:db:cd:ff:
                    da:50:ae:64:79:68:12:f3:69:24:27:ba:22:30:25:
                    7c:96:61:86:c1:b6:60:80:50:3a:e3:5d:05:54:72:
                    7b:51:77:5a:78:75:48:ec:c8:1a:6c:5f:32:ff:a6:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1D:C3:98:CD:8C:23:60:A9:A1:E2:F4:D3:BD:27:95:6F:03:FC:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/7cdca630-d3e7-3865-840b-973e14ba9d60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e/f58d7f53-424c-46bf-bd09-c1a26b82131e.crl

            X509v3 Authority Key Identifier:
                keyid:4F:F8:6A:9E:17:B8:58:8A:3A:C6:E0:3B:C9:27:12:05:37:B2:22:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f58d7f53-424c-46bf-bd09-c1a26b82131e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbbb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:90:68:13:12:df:fc:f4:9b:20:b5:cf:2c:19:b7:73:07:49:
         f3:2f:68:00:7e:84:53:19:42:6c:37:c5:ed:13:56:07:24:92:
         36:f2:0f:14:94:e5:38:c0:0c:96:59:f7:ec:63:d0:90:c3:1c:
         cb:52:f4:a5:a4:7e:1c:5c:74:62:65:d9:8b:20:47:c5:59:df:
         75:35:e3:04:4e:1c:27:2a:5e:8f:7d:15:00:b6:30:e3:c8:14:
         a7:97:49:22:9a:9e:33:af:a7:97:0e:df:0b:98:44:c5:f9:95:
         e9:59:4f:32:2f:46:45:71:09:c5:89:5f:97:47:04:b4:8b:b5:
         84:24:57:b8:62:5e:cb:cd:88:37:80:b4:bc:50:65:2e:29:f6:
         74:b2:5f:f9:e0:1e:0d:ab:a0:d0:bc:7a:31:53:70:42:f6:65:
         8c:35:38:f9:03:ea:4c:04:be:51:e2:57:86:1d:f5:72:90:ec:
         76:3d:20:bd:25:ca:77:9a:52:e3:36:29:78:04:0f:27:10:ec:
         3f:e4:40:a5:7c:c5:78:b1:2b:df:b7:ed:9b:ba:a4:38:94:04:
         b4:68:ca:ac:65:d1:01:50:0e:ea:d8:3d:ee:ab:ab:ab:c2:b2:
         12:fe:e0:61:83:cc:7b:3f:a8:ba:2a:a1:92:b8:60:70:94:14:
         b0:0b:b5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:13:02 2025 by rpki-client